No more hacks — Elasticsearch just shipped native joins in ES|QL.
Yep, actual lookup joins, across indices, with a real query language, and real performance.
This is big for logs, metrics, security data — basically everything you’ve been force-denormalizing for years. It only took 15 years...
No more hacks — Elasticsearch just shipped native joins in ES|QL. Yep, actual lookup joins, across indices, with a real query language, and real performance. This is big for logs, metrics, security data — basically everything you’ve been force-denormalizing for years. It only took 15 years...